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What is claimed: 

1. A method for accounting for network usage comprising: 

obtaining accounting start-ston/event data from an accounting server; 

obtaining network flow data from a router within a network through an 
intermediary netflow collector ;yand 

correlating said accounting start-stop event data and said network flow data into 
a subscriber specific call detail record. 

2. The method of claim 1 wherein said obtaining accounting start-stop event data 
further comprises: 

parsing said accounting start-stop event data from said accounting server on a 
prescribed time interval; and 

publishing said accounting start-stop event data on an information bus. 



3. The method of claim 1 wherein said obtaining accounting start-stop event data 
further comprises: 
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collecting said accounting start-stop event data at a target device that subscribes 
to said accounting start-stop event data. 

4. The method of claim 2 wherein said obtaining accounting start-stop event data 
further comprises: 

collecting said accounting start-stop event data at a target device that subscribes 
to said accounting start-stop event data. 

5. The method of claim 1 wherein said obtaining network flow data further 
comprises: 

aggregating said network flow data at said network flow collector according to a 
service provider defined aggregation scheme. 

6. The method of claim 5 wherein aggregating said network flow data further 
comprises: 

basing aggregation of said network flow data on a specified time period. 

7. The method of claim 5 wherein aggregating said network flow data further 
comprises: 

basing aggregation of said network flow data on the Internet Protocol Layer 3 
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source address. 

8. The method of claim 5 wherein aggregating said network flow data further 
comprises: 

basing aggregation of said network flow data on the Internet Protocol Layer 4 
destination address. 

9. The method of claim 1 wherein said obtaining network flow data further 
comprises: 

filtering said network flow data at said network flow collector according to a 
service provider defined filtration scheme. 

10. The method of claim 1 wherein said obtaining network flow data further 
comprises: 

collecting said network flow data from said a router and forwarding said network 
flow data to said network flow collector; 

aggregating said network flow data according to a defined aggregation scheme; 

parsing said network flow data from said network flow collector; 
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publishing said network flow data on an information bus; and 

11. The method of claim 10 wherein said obtaining network flow data further 
comprises: 

filtering said network flow data according to a service provider defined filtration 
scheme. 

12. The method of claim 1 wherein said correlating said accounting start-stop event 
data and said network flow data further comprises: 

reformatting said call detail record to meet post-correlated applications. 

13. A method for accounting for network usag6 comprising: 

parsing accounting start-stop event darca from an accounting server on a 
prescribed time interval; / 

publishing said accounting start-/top event data on an information bus; 

collecting network flow datagram a network router and forwarding said network 
flow data to a network flow collec/or; 

aggregating said network flow data according to a prescribed aggregation 
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scheme; 



parking said network flow data from said network flow collector; 

publishing said network flow data on an information bus; 

collecting said accounting start-stop event data and said network flow data at a 
target device that subscribes to said accounting start-stop event data and said network 
flow data; and 

correlating said accounting start-stop event data and said network flow data into 
a subscriber specific call detail record. 

14. A method for aggregating accounting start-stop event data and network flow 
data within a computer network comprising: 

obtaining accounting start-stop event data from an accounting server; 

obtaining network flow datagram a router within a network through intermediary 
netflow collectors; and 



correlating said accounting start-^top event data and said network flow data into 
a call detail record. 
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15. An apparatus for accounting for network usage comprising: 



a means for obtaining accounting start-stop event data from an accounting 



server; 



a means for obtaining network flow data from a router within a network through 
an intermediary netflow collector; am 



a means for correlating said 
flow data into a subscriber specific cs 



16. An apparatus for accounting for network usage comprising: 



accounting start-stop event data and said network 
1 detail record. 



a means for parsing accounting \start-stop event data from an accounting server 
on a prescribed time interval; 



a means for publishing said accounting start-stop event data on an information 



bus; 



a means for collecting network flow data from a network router and forwarding 
said network flow data to a network flow collector; 

a means for aggregating said network flo\/ data according to a defined 
aggregation scheme; 
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a means for parsing said network flow data from saia network flow collector; 



a means for publishing said network flow data on an information bus; 

a means for collecting said accounting start-srtop event data and said network 
flow data at a target device that subscribes to saig accounting start-stop event data and 
said network flow data; and 

a means for correlating said accounting start-stop event data and said network 
flow data into a subscriber specific call detail record. 

17. An apparatus for aggregating accounting start-stop event data and network flow 
data within a computer network comprising: 



a means for obtaining accounting start-stop event data from an accounting 



server; 



a means for obtaining ne/twork flow data from a router within a network through 
an intermediary netflow collector; and 



a means for correlating said accounting start-stop event data and said network 
flow data into a call detail record. 
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18. An apparatus for accounting for network usage /omprising: 

an accounting adapter in communication wim accounting start-stop event data; 

a network flow adapter in communication with network flow data; and 

an integrating accounting adapter in communication with said accounting 
adapter and said network flow adapter whLth correlates said accounting start-stop event 
data and said network flow data into a subscriber specific call detail record. 



1\^ The apparatus of claim 18 wherein said accounting adapter further comprises: 

a panter in communication with an accounting server storing accounting start- 
stop event data; 

a publisher in communication wirh an information bus. 




20. The apparatus of claim 18 wherein sakl network flow adapter further comprises: 

a parser in communication with a network router storing network flow data; 

an aggregator that assembles said network flow data accbsgling to an aggregation 
schem e ; and 
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lisher in communication with an information bus. 




21. The apparatus of claim 18 wherein said integrat ing accounting - adaptor further' 
comprises: 



a correlator that assembles said accounting start-stop event data and said 
network flow data into a call detail record; and 

a reformattor in communication with a post processing application device that 
reformats the data according to service provider requirements. 

22. An apparatus for aggregating accounting stzp-stop event data and network flow 
data within a computer network comprising: / 

an accounting adapter in communication with accounting start-stop event data; 

a network flow adapter in communication with network flow data; and 

an integrating accounting adapter in communication with said accounting 
adapter and said network flow adapter whiih correlates said accounting start-stop event 
data and said network flow data into a subscriber specific call detail record. 

23. A program storage device readable by a machine tangibly embodying a program 
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of instructions executable by the machine to perform a method for accounting for 
network usage, said method comprising: 

obtaining accounting stlrt-stop event data from an accounting server; 



obtaining network flow 
intermediary netflow collector 



data from a router within a network through an 
; and 



correlating said accounting start-stop event data and said network flow data into 
a subscriber specific call detail record. 



24. A program storage device readable by a machine tangibly embodying a program 
of instructions executable by the machine to perform a method for aggregating 
accounting start-stop event d|ata and network flow data in a computer network, said 
method comprising: 

obtaining accounting kart-stop event data from an accounting server; 

obtaining network flokv data from a router within a network through an 
intermediary netflow collector; and 



correlating said accounting start-stop event data and said network flow data into 
a subscriber specific call detail record. 
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25. A communication system for aggregating accountir/g start-stop event data and 
network flow data within a computer network comprising: 

a plurality of hosts that are provided computey networking capability through a 
point of presence; 



a network access server in communication with said hosts; 



an accounting server in communication withfeareUietwork access server; 
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an accounting adapter in communication with said accounting server; 

a network flow collector in coiyimunication with routers throughout the computer 
network; 



M* a network flow adapter in communication with said netflow collector; and 
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an integrating accounting adapter in communication with said accounting 
adapter and said network flow adapter. 
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